I know TAC has updated it for me in the past via SSH into the ASA's and then console into the sensors. However, I do no have documentation on the exact procedure.
Thanks Nikhil and Alex,
I found this and used it in a script to prevent my admins from inadvertently removing all the VLANs off a Trunk.
event manager applet forbid-vlan-trunk event cli pattern "switchport trunk allowed vlan\s+[0-9]" sync no skip ...